Explain Methodologies Used to Select Security Technologies Aligned to Business Need, Organizational Technology Landscape, and Security Controls. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   During an organizational technology landscape assessment, which activity is most important for determining whether a new security tool can be integrated?

   • AInterviewing end users about their satisfaction with current tools
   • BReviewing the vendor's marketing materials
   • CDocumenting the existing network topology and application dependencies
   • DCalculating the total cost of ownership for the new tool
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A security architect is meeting with business stakeholders to understand what drives the selection of a new security technology. Which activity best represents a business needs analysis?

   • ASelecting a vendor based on the lowest cost per user
   • BBenchmarking the performance of the existing SIEM against industry standards
   • CReviewing the current firewall rule base for unused rules
   • DInterviewing department heads to identify critical data assets and acceptable risk levels
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which step is part of a structured selection methodology for security technologies?

   • AChoosing the technology with the most features regardless of requirements
   • BDeploying the technology immediately after the first vendor demo
   • CSelecting a technology based on the vendor's market share
   • DConducting a proof of concept to validate the technology in the organization's environment
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A manufacturing company is considering a new identity and access management (IAM) solution. The business requirement is to reduce the time it takes to onboard and offboard employees, while maintaining strong security controls. The current process is manual and takes several days. Which IAM feature should the security architect prioritize in the selection?

   • AAutomated provisioning and deprovisioning of user accounts.
   • BMulti-factor authentication (MFA) for all users.
   • CRole-based access control (RBAC) to manage permissions.
   • DSingle sign-on (SSO) for all applications.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   A security architect is mapping security technologies to controls. Which technology is correctly classified as a detective control?

   • AA firewall that blocks unauthorized traffic
   • BA backup system that restores data after a ransomware attack
   • CAn intrusion detection system that alerts on suspicious activity
   • DA security policy that requires strong passwords
   Reveal Solution Discussion Select an answer first